CVE

Id
4393  
CVE No.
CVE-2001-1593  
Status
Candidate  
Description
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.  
Phase
Assigned (20140205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
20984 4393 CVE-2001-1593 MLIST:[oss-security] 20140204 Re: CVE request: a2ps insecure temporary file use  View
20985 4393 CVE-2001-1593 URL:http://seclists.org/oss-sec/2014/q1/253  View
20986 4393 CVE-2001-1593 MLIST:[oss-security] 20140205 Re: CVE request: a2ps insecure temporary file use  View
20987 4393 CVE-2001-1593 URL:http://seclists.org/oss-sec/2014/q1/257  View
20988 4393 CVE-2001-1593 MLIST:[oss-security] 20140205 Re: CVE request: a2ps insecure temporary file use  View
20989 4393 CVE-2001-1593 URL:http://seclists.org/oss-sec/2014/q1/237  View
20990 4393 CVE-2001-1593 CONFIRM:http://pkgs.fedoraproject.org/cgit/a2ps.git/plain/a2ps-4.13-security.patch  View
20991 4393 CVE-2001-1593 CONFIRM:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737385  View
20992 4393 CVE-2001-1593 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1060630  View
20993 4393 CVE-2001-1593 DEBIAN:DSA-2892  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64220 JVNDB-2001-000204 spy_user 関数およびその他の関数で使用される a2ps の lib/routines.h 内の tempname_ensure 関数における任意のファイルを変更される脆弱性 spy_user 関数およびその他の関数で使用される a2ps の lib/routines.h 内の tempname_ensure 関数には、任意のファイルを変更される脆弱性が存在します。 CVE-2001-1593 4393 2.1 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000204.html  View